Static task
static1
Behavioral task
behavioral1
Sample
62dc2118a34b65b5a701f328f7d2b971_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
62dc2118a34b65b5a701f328f7d2b971_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
62dc2118a34b65b5a701f328f7d2b971_JaffaCakes118
-
Size
115KB
-
MD5
62dc2118a34b65b5a701f328f7d2b971
-
SHA1
6f1d15a771904c072eaf6a1d967f61308e58a456
-
SHA256
e0dd628c33b98873812f40e54f186d5a7b1e1d28971e031890aeef515c7ed6fc
-
SHA512
afeae7456b4882cc8e5e7c7cdb74f082cf7722a4173df1d5c6018e5fa21a872f5c1907403fb298e80ac954a42050f798697903db30a7bf39bd470e7cbefb58f3
-
SSDEEP
3072:l1ffEpuOsrYpL5Myu+KXpD0theu652S3S6:n8hsAG+KXh8F652oF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62dc2118a34b65b5a701f328f7d2b971_JaffaCakes118
Files
-
62dc2118a34b65b5a701f328f7d2b971_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
P Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE